A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted… (CVE-2026-106176)

CVE-2026-106176 is a missing authorization vulnerability in Fortinet FortiSIEM 7.5.0. It allows an attacker with high privileges to execute unauthorized code or commands by sending specially crafted HTTP requests. The vulnerability is classified under CWE-862 (Missing Authorization). The CVSS v3.1 base score is 3.8, reflecting a low severity with network attack vector, low attack complexity, and no user interaction required. Integrity and availability impacts are low, with no confidentiality impact reported. There is no explicit information on patches or fixes, and no known active exploitation.

An attacker with high privileges could exploit this vulnerability to execute unauthorized code or commands, potentially impacting system integrity and availability. Confidentiality is not affected. The low CVSS score suggests limited overall impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor Fortinet advisories for updates. Until a fix is available, restrict access to FortiSIEM management interfaces to trusted administrators only.